PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Meet Burp Suite DAST: Your questions answered

portswigger.net | blog | #api-security | #webinar | #portswigger | #burp-suite-dast | #enterprise-security | #qa
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Q&A recap from the Burp Suite DAST webinar covering the rename from Enterprise Edition, how it complements Burp Suite Professional, API scanning, CI/CD integration and extension support.
Published
Collected

Related coverage

blog · portswigger.net
You asked, we answered: Q&A from The Future of AppSec webinar
PortSwigger answers standout questions from its Future of AppSec webinar, covering Burp Suite DAST availability, API workflow scanning, AI models, product roadmap and enterprise deployment.
blog · portswigger.net
Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026
Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share. OWASP is
blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · portswigger.net
Burp AT: What's new since Black Hat
Launch Burp AT now Find out more about Burp AT Since we launched Burp AT at Black Hat USA, it's been great to s
blog · portswigger.net
Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
Back